Andrew Stitcher created PROTON-2974:
---------------------------------------
Summary: TLS peer hostname verification should proceed according
to RFC9525
Key: PROTON-2974
URL: https://issues.apache.org/jira/browse/PROTON-2974
Project: Qpid Proton
Issue Type: Bug
Components: proton-c
Reporter: Andrew Stitcher
Assignee: Andrew Stitcher
Fix For: proton-c-0.41.0
Our current TLS peer hostname verification is home grown and not in accordance
with modern standards. The modern standards are actually much stricter and
simpler than what we implemented.
Since this code was written OpenSSL has got the ability to do this and we can
just require a base version of OpenSSL which can do it.
The SChannel Win32 code can implement the stricter checks too in custom code
which is much simplified from the original.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
